Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/11ea29d3-7930-3fac-83d2-a8f0c9fba314.roa
File:                     11ea29d3-7930-3fac-83d2-a8f0c9fba314.roa (raw, json)
Hash identifier:          V0om4a4+x22G1wm+S1bC06IG8siIkRXM0TIM9yJPnv4=
Subject key identifier:   52:02:08:43:CC:0C:14:3A:02:E2:15:9F:B6:59:EF:0F:42:E6:8E:3B
Certificate issuer:       /CN=c9981c1f-5b90-4ac4-bd3a-17c5452146c3
Certificate serial:       010D0C9F4328584F093CEAA270F2D7C9E07AFDD0
Authority key identifier: B9:DE:27:16:CA:36:34:09:BD:0B:0C:F6:7D:A5:21:BC:76:80:A8:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/11ea29d3-7930-3fac-83d2-a8f0c9fba314.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     10967
IP address blocks:        165.130.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3c:ea:a2:70:f2:d7:c9:e0:7a:fd:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9981c1f-5b90-4ac4-bd3a-17c5452146c3
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=1c3a09d8-fe2c-4cae-9dd8-692fcdc6a7cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:09:8e:85:22:56:17:12:4a:c7:d0:91:eb:80:
                    41:ee:26:9e:d9:89:c7:c0:8a:94:9e:6c:07:ab:95:
                    62:4a:6f:3d:66:92:c0:55:2a:e3:98:20:7a:de:05:
                    c5:10:e5:68:cb:77:3e:06:13:a8:47:66:d0:9f:b7:
                    64:19:3b:c3:6d:4a:f8:63:19:0e:85:45:13:18:66:
                    25:b3:2a:27:85:60:b1:eb:63:52:b9:d9:be:3b:ec:
                    52:89:ff:4f:26:61:53:b5:e6:e1:31:09:3f:c5:d0:
                    39:50:5b:9b:27:1b:19:03:28:29:c8:d5:c9:00:7f:
                    cf:70:6f:8d:4d:41:10:83:31:3f:6d:0b:a2:a1:86:
                    21:36:de:7c:fc:f2:ff:40:81:ab:a6:bb:30:48:be:
                    32:55:81:e2:c0:03:c8:3d:e3:92:b1:0d:d4:cb:99:
                    64:3b:b3:80:e7:7f:a8:d9:fa:c0:19:09:11:eb:d6:
                    8a:8c:3c:30:10:e0:b6:b3:0f:b1:59:78:a3:83:97:
                    eb:ed:9a:eb:f4:63:31:55:a5:4b:64:cc:ef:f2:75:
                    50:05:47:c7:09:b1:73:6a:11:47:53:cf:a4:67:7e:
                    8b:cd:00:11:85:12:85:89:28:8a:15:78:9a:52:c2:
                    c9:43:5f:68:43:4c:4b:95:46:d8:5a:f4:98:0a:4a:
                    30:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:02:08:43:CC:0C:14:3A:02:E2:15:9F:B6:59:EF:0F:42:E6:8E:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/11ea29d3-7930-3fac-83d2-a8f0c9fba314.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.crl

            X509v3 Authority Key Identifier:
                keyid:B9:DE:27:16:CA:36:34:09:BD:0B:0C:F6:7D:A5:21:BC:76:80:A8:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.130.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:6b:e8:80:c7:a1:ba:7a:ae:44:5d:0f:c1:90:0e:76:9d:df:
         60:44:d0:02:ff:a6:b9:bf:16:73:7c:91:de:3e:02:25:2d:10:
         10:12:60:5d:55:af:ed:3b:05:d0:2a:d1:cd:f4:b1:24:34:8e:
         70:98:94:4b:94:5a:15:e4:33:01:a1:ae:14:67:2b:19:67:7b:
         2c:e9:16:0d:b6:d9:2d:c4:f5:92:a1:43:d2:c5:7f:7f:f5:6a:
         fb:89:ee:aa:17:b4:9c:18:61:30:f2:2a:76:fd:8e:32:09:73:
         23:a5:90:04:ea:5f:71:e3:b2:f2:ea:c2:87:6a:be:6f:16:b5:
         86:82:b6:e2:d9:6b:09:6a:b0:17:d8:58:03:3b:8c:3d:96:80:
         a2:35:6c:88:72:59:1f:fa:5f:3d:65:12:66:6f:74:e2:03:9a:
         a2:f8:78:2a:5b:2e:4d:d2:dc:05:41:d7:2f:72:28:77:42:86:
         eb:41:ca:8f:cd:13:c8:7c:b8:b5:6a:41:a2:22:e1:1e:38:2c:
         5f:b9:19:4a:70:84:91:0a:35:53:d9:32:80:9a:eb:4b:aa:31:
         cf:03:b1:91:ef:f5:5c:14:2c:11:53:74:40:c0:89:f0:a6:b4:
         82:ff:89:1d:b9:c4:39:82:59:d6:22:08:7d:27:28:bf:a9:66:
         b3:c5:7e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:56:23 2026 by rpki-client